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WHAT IS CLAIMED IS: 

1 . A method of analyzing policy rules defined for a subscriber and determining 
packet treatment, the method comprising: 

retrieving definitions pertaining to policy rules for a subscriber; 

determining at least one policy point in a network for the subscriber based on the 
retrieved definitions; 

determining the packet treatment at each of the at least one policy point; and 

outputting information corresponding to the packet treatment for each of the at 
least one policy point.. 

2. The method of claim 1, further comprising: 

consolidating the determined packet treatment for each of the at least one policy 

points; and 1 

j .. ■ • 

displaying information representing the packet treatment through the network. 

3 . The method of claim 1, wherein the determining the packet treatment 
comprises assigning traffic to traffic groups based on ones of the policy rules that are in 
effect. • . ' ; ".. • 

4. The method of claim 3, wherein traffic assigned to one of the traffic groups 
satisfies a same one or more policy rule conditions. 
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5. The method of claim 3, wherein the determining the packet treatment further 
comprises: 

determining which ones of the policy rules have conditions satisfied by packet 
input; and 

determining which of the policy rules that have conditions satisfied by the packet 
input are eclipsed. 

6. The method of claim 5, wherein the determining which of the policy rules that 
are eclipsed is based on eclipsing rules defined for a router. 

7. The method of claim 1 , wherein the determining the packet treatment 
comprises: < , , 

obtaining a list of policy rules defined for a direction of an interface; 
sorting the list of policy rules based on a precedence defined for each of, the 
policy rules; and , 

... for each of the sorted policy rules: \ 

determining whether a condition of each one of the sorted policy rules is 
satisfied by a possible packet input; *.'■■" 

for each of the conditions that are satisfied by the possible packet input, 
adding the corresponding policy rule to an "in effect" list of the policy rules; 

for each of the conditions that are not satisfied by the possible packet 
input, adding the corresponding policy rule to an "ignore" list of the policy rules; 
and 
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determining which ones of the policy rules from the "in effect" list are 

eclipsed and moving ones of the policy rules that are eclipsed to an "eclipsed" list 

of the policy rules. 

8. The method of claim 7, further comprising performing, for each of the sorted 
policy rules, determining which ones of the policy rules from the "in effect" list can be 
combined and rearranging an order of the sorted "in effect" list of the policy rules based 
on a definition of permissible combined actions. 

9. The method of claim 1, further comprising: 

determining at least one injection point based on the at least one policy point; 
using at least one policy agent to inject packets at the at least one injection point; 
collecting statistics from some of the at least one policy agent; 
consolidating and correlating the collected statistics; and 
displaying results based on the consolidated and correlated statistics. 

* 

10. One or more devices for analyzing packet treatment in a network, the one or 
more devices comprising: 

a user input/output interface configured to receive input from a user interface and 
to send output to the user interface; 

a database interface configured to access definitions in the database; 

a management server interface configured to request and receive information from 
a management server; 
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a network interface configured to request and receive information from devices in 

the network; and 

analyzer logic configured to analyze packet treatment based on policy rules 
defined for a subscriber. 

1 1 . The one or more devices of claim 10, further comprising an agent interface 
configured to send commands to at least one agent and to receive information from the at 
least one agent. 

12 . The one or more devices of claim 10, wherein the analyzer logic is 
configured to use policy rule definitions defined for a subscriber when performing 
analysis. 

., ,j ■ '• ■ * • ■ 

13. The one or more devices of claim 12, wherein the analyzer logic is further 
configured to: * . 

determine a policy point in a network based on the defined policy rules; 

analyze packet treatment based on conditions and actions identified in the defined 

* 

policy rules; and 

send analysis results via the user input/output interface. 

14. The one or more devices of claim 12, wherein the analyzer logic is 
configured to: 
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determine one or more policy points in a network based on the defined policy 

rules; and 

analyze the packet treatment at each of the one or more policy points based on the 
defined policy rules. 

15. The one or more devices of claim 12, wherein the analyzer logic is further 
configured to analyze possible traffic on an interface and determine traffic groups for 
portions of the possible traffic. 

16. The one or more devices of claim 12, wherein the analyzer logic is further 
configured to analyze possible packet input on an interface and determine actions to be 
taken based on the defined policy rules. 

17. The one or more devices of claim 1 1, wherein the one or more devices are 
configured to command, via the agent interface, one or more agents to inject packets into 
a network. 

18. The one or more devices of claim 11, further configured to: 
command, via the agent interface, one or more agents to inject packets into a 

network; and 

collect statistics via the agent interface, wherein the analyzer logic is further 
configured to consolidate and correlate the collected statistics. 
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19. A system for analyzing packet treatment in a network, the system comprising: 
a management server configured to load policy rules and service definitions to a 

router when a subscriber session is established; 

a database including definitions of policy rules, the service definitions, and a 
network configuration, the database being configured to be accessible by the management 
server; 

a policy analyzer configured to analyze packet treatment based on ones of the 
policy rules and the service definitions defined for a subscriber, the policy analyzer being 
configured to access the management server and the database; and 

a user input/output interface configured to provide input to the policy analyzer 
and receive analysis results from the policy analyzer. 

20. The system of claim 19, further comprising a policy analyzer agent 
configured to receive commands from the policy analyzer to inject packets into a network 
at an injection point. 

•i , 

21. The system of claim 19, further comprising a policy analyzer agent 
configured to collect statistics regarding traffic injected at an injection point and to send 
the collected statistics to the policy analyzer. 

22. The system of claim 19, wherein the policy analyzer is configure to determine 
a plurality of traffic groups based on the ones of the policy rules and the service 
definitions defined for a subscriber. 
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23. One or more network devices, comprising: 

an analyzer interface configured to receive commands from a policy analyzer and 
send information to the policy analyzer; and 

a statistics module configured to collect statistics of traffic injected into a 
network, .the statistics module being further configured to send the collected statistics to a 
policy analyzer via the analyzer interface. 

24. The one or more network devices of claim 23, wherein the one or more 
network devices include a router. 

. 25. The one or more network devices of claim 23, further comprising an injector 
for injecting traffic into the network upon receiving a command from the policy analyzer 
via the analyzer interface. 

26. One or more devices for analyzing packet treatment in a network, the one or 
more devices comprising: 

means for receiving input from a user interface and for sending output to the user 
interface; 

means for accessing definitions in a database; . . 
means for requesting and receiving information from a management server; and 
means for analyzing packet treatment based on policy rules defined for a 
subscriber. 
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